{
  "cveId": "CVE-2022-48849",
  "url": "https://patchblox.com/security/cve/CVE-2022-48849",
  "summary": "CVE-2022-48849 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48849, released July 16, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: bypass tiling flag check in virtual...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: bypass tiling flag check in virtual display case (v2)  vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when virtual display is enabled.  This can fix below calltrace:  amdgpu 0000:00:08.0: GFX9\u002B requires FB check based on format modifier WARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init\u002B0x8e7/0xb40 [amdgpu]  v2: check adev-\u003Eenable_virtual_display instead as vkms can be \tenabled in bare metal as well.",
  "published": "2024-07-16T13:15:12Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
  "epss": 0.00216,
  "epssPercentile": 0.12115,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48849",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48849",
      "released": "2024-07-16T13:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48849",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48849",
      "released": "2024-07-16T13:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48849",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48849",
      "released": "2024-07-16T13:15:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}